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SUBJECT 



Studies Involving Multiple Stepping 



rwarded herewith is a paper listing references to 
le stooping iii reports made by WDGAS-76C, and a memorandum 
lD&ic Res earcn Subsection giving examples of other 
pie stepping studied by them* These two papers do 
lect the amount of thought that has been devoted 
ause the feature of multiple stepping has been 
mbodiments that have been discarded later* 
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ubsection has studied the German Cipher Machine 
SG-41 , which involves multiple stepping* Some of these studies are 
now bolng wrLtten uf and will be forwarded when complete* 
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ROBERT E. GORDON 
CIC, Projects Section 



nces td multiple stepping* 
es of 4 ultl P le Stepping. 



THRU:. AS-76 24 Apr 1. Forwarded for your information in 

A3-70 response to your recent question on the subject. 

TO: 

AS-14 2. Keep one copy for your file. 
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22 April 1947 



References to Multiple stepping 



The following paragraph is from a paper entitled "Projected 
Random Tape Cipher Machine (suggested modifications for Mr* 
Friedman’s device)* 2 July 1946* 

"A further modification of this last proposal has been 
suggested, in which the rotor would be in oontinuous motion, and 
the necessity of stopping and restarting its rotation during 
encipherment completely eliminated* The major problems here, of 
course, are the difficulties involved in synchronization and in 
adjusting tne machine to Irregularities in the speed of keyboard 
operation, the idea has, however, been discussed with the engineers 
and tne possibility of such a design is being considered*" 

The following, references to research done on Multiple Stepping 
Cipher devices have appeared in the weekly reports of Projects 
Section of Research Laboratories Division* 

24 October 1946 - Thinking on the MX-507 and 508 has 
been proceeding along with the work on tne 519* The main effort 
nas been directed toward evolving a totally new cryptographic 
principle, or, alternatively, if a rotor maze is used, to cut 
down the number of rotors necessary, and to maintain the necessary 
level of security by adding new principles to the rotor maze* For 
different principles involving a rotor maze the following are 
being considered: 

1) Multiple stepping of rotors, i*e* Instead of a rotor stepp- 
ing one place or not all, it would step either 0, 1, 2, or 3 places 
between encipherments 

16 January 1947 - The cycle of a multiple stepping device 
with tne following motion control has been examined 

"In a w-wheel device a specified subset of the 
wheels move according to the rule of motion, (a); 

¥ 

a* 'The wheel moves one step wnen a notch 
appears for tne first time in the effective position of its con- 
trolling wheel, otnerwise it remains stationary* 

The rest of the wneels move accordin 0 to, rule (b) • 

b* The wneel receives at every encipherment 
one Impulse to move; it receives an additional Impulse to move if 
a notch appears for the first time in the effective position of its 
controlling wheel* The wneel thensuves as many steps as it has 
received Impulses, except that it stops wnen it reaches a notched 
position and stores the remaining impulses to move until the next 
encipherment, at which time as many of the stored impulses will 
be discharged as possible without skipping a notch*" 
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(References to Multiple Stepping) 

Regarding che above device tne following may be stated: 

(A) If the N| are chosen so tnat E^-NjNg. . .N^ is a prime, 
then the cycle length Is L s l^-N^g • . .N w • This Is true no matter 
wnlch subset of wheels are chosen to be governed by rule (a)* 

(B) If no wneels have consecutive notches only one motion Impulse 
need be stored on any one wheel* 

25 Janaury 1947 .- A conference was held with Mr. Barlow of 
E- & S. Branch concerning principles to be employed In the 507 and 
508. He was Informed of new principles which might be considered 
such as multiple stepping. Ways and means of controlling stepping 
were discussed, hr. Barlow stated that nls branch preferred tnat 
multiple stepping not involve more tnan a choice of f6, 1, or 2 steps 
This, unfortunately, would weaken the principle so that it will not 
allow the number of rotors to be cut drastically. 

# 

20 February 1947 - 1. A paper nas been written stating 
and proving several necessary conditions .nich must' be satisfied in 
a device naving w K-point wneels , with a cycle of K!* and with each 
setting having a unique successor. This theory was used to set up 
a multiple stepping device with a cycle of K?" • 

2- Consideration was given to tabulating for tne proposed 
Cipher joachlne Generator the features most essential to the work 
of the unit . 

26 March 1947 - Consideration is being given to a type of 
motion control organization called "planetary". In this type of 
organization one or more units of, sa,/, two or three wneeis, are 
each' treated as single wi.eels in a larger device, bucn units are 
permitted to step through tnelr cycles only wnen they receive an 
impulse from other elements in the device. 

# 

For example, a three-wheel CCM unit of cycle length C might 
step through its cycle only wnen it received an impulse from one 
or more other wneels which move in any erratic manner (so long as 
tney no not stop degd) • These other wneels may have multiple 
stepping if desired; they could be controlled in whole or in part 
by the CCM unit, thus giving interlocking motion. The cycle of 
the complete device would not be definitely known but would be 
greater tnan C. 

5 April 1947 - Investigation has proceeded on two 
further examples of devices wnose "wheels" are units consisting of 
two or more actual rotors. (This type of motion control vas re- 
ferred to an "planetary" In last week's report •} In one of the new 
examples one of the "wneels" is a CCM unit, which guarantees the 
cycle, even though tne motion of tne wnole device is interlocking 
(a detailed embodiment of tnis is being forwarded for comment) • In 
the otner example tne whole device may be regarded as CCM each of 
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(References to Multiple Stepping) 

whose three "wheels” is a pair of mutually delayed rotors; notches 
can be placed on the six rotors so that for 88,2 of tne wheel orders 
the cycles will all be greater than 13,000,000* 

A studj of C-41 cycles w^an the five incongruences Imposed in 
TICOM/l - 72 are not all satisfied nas shown tnat very short cycles 
are possible* By violating onlj one of t.ie above conditions 
(equivalent to failure to activate one pin on one waeel) a c^cle 
of 70 was obtained, as compared to a minimum of 1 55,220,000 under 
German usage • 
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SUdJECT: Examples of Multiple Stepping 

TO : CIC, Projects Section 



1. Cyclic polymetric . On each motion phase, let all wheels 
move one step regularly, plus one step for a newly arrived notch 
on the wheel to the left (the last waeel on the right Is con- 
sidered as being to tne left of the first wheel) . However, If 
this would Involve skipping a notch on GMi, then C'*! moves only 
one step and stores the additional motion Impulse until tae next 
motion phase, at which time the Impulse Is discharged. Arranging 
notches non-consecutively will prevent naving to store more than 
one impulse at a time. 

It ma } be 3hown that the c}cle for a device of w K-point 
wheels with this rule of motion is * ,H w, provided this 

number Is a prime. Moreover, the regular step may be omitted for 
any one or more wheels (but not all), without affecting the length 
of this cycle. 

2. Modified COM . In tha standard CCI*I tne middle wheel, Ctol, 
steps once on each motion phase. Suppose that Ci.2 moved as man} 
steps as chore were notches in two consecutive positions of Chi, 
and CM3 moved as man} steps as tnere were notches In t wo consecu- 
tive positions of CVj 2 ■ in other words, tnere are two effective 
positions on CW1 and C'«2, and tae sum of the number of notcnes In 
those positions gives the number of steps of the next wheel. The 
following results have been obtained. 

If E denotes the size of the wheels (26 In the standard CCM) 
and the number of notches on CW1, tne c^cle of Chi and Cw2 is 

K 2 « The c}cle of Chl-2-3-in general involves the pattern of 

(KTSffI) 

notches on CVv2, not just the number of notches, and when (K,21h ) 

= 3 it Is believed possible to choose patterns so thfet the c}cle 
is E? • Hiihen (K,2N]_) ■ 1 or 2 the cycle is K® or k£ respectively, 
3 2 

regardless of the number or arrangement of notches on CW2. Thus 
for 26-point wheels tnls type of motion would not be good, since 
(26, 2K^) - 2 for all values of N]_ except 13. 

3. Pyramidal motion . A device of w E-point wneels, with 
multiple stepping permitted on all but one wheel, can be made to 
have a C}de of K w by building up the c}cle so that the first 1 
wheels have a c}cle of K*. One way to do this is as follows. 

Let Cwl step once on each motion phase. Then at each setting CW1 
either- has a notcn (+) or no-notcn (-) • at each of these two 

f 



SECRET 




REF 



(Sxaraples of multiple Stepping) 

kinds of notch situation C1Y2 Is caused to move a certain number 
of steps, 0, 1, 2, etc.. In such a way tnat after a revolution 
of CW1 tne number of steps of Ch'2 Is prime to K. If CTwl has 
notches, with Cft2 moving x steps for a CVil notch and y steps for 
a C%2 no-notch, then for each CA1 revolution, CW2 moves HLq = 
xN^4y(K-N^) steps, Por example, if x s 1 and y = 0, as in ordin- 
ary polymetric motion, Ifig = N^ and the cycle of CW1 and CW2 is 
K 2 If Is prime to K. If x = 2 and y = 1, we get Hg * 2N^«>K-N^ 

= KVNj. 5 (mod K ) , and the cycle Is the same as for x a 1, y s 0- 

During a cycle of CW1-2, tnere are four possible notch situations on 
tne two vriieels, namely 44 , 4 -, - 4 , — • At each of tnese Cwo is 
caused to move 0, 1, 2, etc., steps. ‘Since the cycle of CW1-2 is 
K 2 , every possible setting of Chi and CY«2 occurs exactly once, so 
that tne numoer of notch situations of each t,,pe is calculable. 

The assignment of 0, 1, 2, etc., is made to e ach notcn situation 
so that the resulting ’'offset" of Cw'5, after a GAl-2 cycle, may 
be made prime to K, thus obtaining a cycle of K 3 . By continuing in 
a similar manner, the cycle of any number of wneels, say w, may be 
made K w • , 

4. C-41 . Let denote the number of active pins on Wl. 

Tnen we have 





Size of 


Number of 




lhheel 


Active Pina 


K1 


25 


Ni 


W2 


25 


Ng 


W3 


23 


n 3 


Y4 


25 


h 4 


W5 


24 


N5 


W6 


24 


n 6 



If N]_, N g, N3, N4, N5 are known, then Tor any setting it is deter 
mined how much each wneel shall step at the next motion pnase. 
Thus tne settings produced bj successive motion phases can be 
written down until tne first setting recurs, completing wnat we 
call a motion period , Since there are one or two motion phases 
between successive encipherments, the cycle (of enciphering 
positions) will be at least half of, but not greater tnan, the 
motion period. The exact cycle will depend on the pin pattern of 
V»6 . 



Tne following conditions on N^ are necessary and sufficient 
to obtain the maximum motion period: 25 2 .23 2 .24 2 = 190,440,000. 

not divisible by 5. 

Mg not 21. 
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(Examples of Multiple Stepping) 

* Ng not 0 or 23* 

> 

N 4 not leaving a remainder of 1 wnen divided by 2 or 3* 

Ng not divisible by 2 or 3* 

The cycle in tnis case is at least 95,220,000. 

By using Nj_ « 10 but obeying the remaining four conditions, 
a period of 125, with an associated cycle of 70, was obtained* 

5* Polymetric cascade * In a five-wheel device let CW1 move 
one step on each motion phase, C¥»'2 move one step as a notch departs 
the effective position of CW1, and C’.#3 move as many steps as there 
are departing notches on Cwl and CKSLr 3y proper choice of the 
notch numbers on C¥ 1 and CW2, the cycle may be made K 3 . The re- 
maining two wheels can be given multiple stepping by rules which 
prevent lobsters and prevent the stepping of a single wheel* 

* 

***#«* 

In addition to the specific rules of motion discussed above, 
there are two general statements as to now multiple stepping may 
be accomplished without interfering with the computation of cycle 
lengths • 




1* Any device with a guaranteed cycle can have multiple 
stepping introduced on any or all wneels that are not involved in 
the cycle guarantee. 

2* In any device in whicn naif the minimum cycle is 
deemed adequate for security', multiple stepping can be achieved, 
in effect, by having two motion poases between successive encip- 
herments. (This would not alter a cycle o f odd length but would 
naive one ol even length.) Qr tnere could sometimes be one motion 
phase and sometimes two between encipherments, depending on the 
notch situation on one or more wheels* 

In practically all the new rules of motion which are current- 
ly being devised the possibility of adjustments to permit multiple 
stepping is considered. 
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